Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. RRAS can be configured both in ______________.
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
Use the route delete command.
IPV4 and IPV6
Windows 7 Enterprise and Ultimate Editions

2. How can you restrict users to create sub-folders in a dfs root share?
It operates by deploying a computer that is running Windows Server 2008 R2 as a host in the branch office. Clients are configured with the fully qualified domain name of the host computer so that they can retrieve content from the Hosted Cache - when
A CA users trust or they will get error messages when trying to securely access a web site. They can avoid the error by installing the CA certificate to the Trusted Root Certificate Store.
Restrict the share permissions of the DFS root share.
Does not

3. Why would you deploy an application compatibility database across multiple computers?
So you can use a system management solution - such as Microsoft System Center Configuration Manager 2007 - to deliver the database to multiple computers and then use the SDBInst.exe command-line tool to install the database. The SDBInst command-line
Deploy a secondary zone.
For example - you can create a rule that allows all Windows processes to run except Registry Editor (Regedit.exe).
IPsec to authenticate both the computer and user - allowing IT to manage the computer before the user logs on. Optionally - you can require a smart card for user authentication. It also leverages IPsec to provide encryption for communications across

4. What does Windows XP Mode for Windows 7 makes it easy to do?
Install and run many Windows XP productivity applications directly from your Windows 7-based PC. It utilizes virtualization technology - such as Windows Virtual PC - to provide a virtual Windows XP Professional SP3 environment for Windows 7 so that o
A suite of tools that allow administrators to understand - control - and manage the quantity and types of data stored on the servers.
Create a customized shell
System Restore Points as well as Previous Versions of Files (configured through the System applet).

5. What happens when 3rd party vendors create a new driver?
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n
On a core server
Turn off the Log Spooler event on a print server.
Use dnscmd /recorddelete

6. What is a split tunnel VPN?
Divide up a large WIM file into multiple smaller .SWM files
Client computers must be running Windows 7 - with the BranchCache feature enabled. Web servers file servers must be running Windows Server 2008 R2 - with the BranchCache feature enabled.
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".
Enforce IPSEC on the network

7. How do you make a Windows 7 Answer File used for unattended setup?
Yes
Deploy a secondary zone.
They need to be configured us use 802.1x RADIUS authentication
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.

8. What is Drvload?
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
Ping the Link Local Address (FE80 Address)
It will display driver signing status

9. How can you removed a stale resource record from DNS?
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.
L2TP/IPSEC with EAP-TLS.
Us edit dnscmd /zoneupdatefromdns command.
Configure aging and scavenging.

10. What does windows cardspace do?
It backs up digitally identities to a password protected file.
You start by selecting Windows XP Mode from the Windows 7 Start Menu. You can install applications in Windows XP Mode just as you normally would on a physical PC. For example - you can install applications via web - from storage devices - or from phy
A WDDM driver for the graphics card and a Windows Experience index of 3.0 or greater.
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.

11. The print management console can be configured to _____________.
Send email notifications
By an EFS Data Recovery Agent. If the computer is in a workgroup and the user has forgotten their password - the user should recover their own password with a Password Reset Disk in order to retain access to their encrypted files. If the administrato
Vista SP1 and Server 2008 and above.
Also known as root scalability mode. Allows organizations with more than 16 namespace servers use consistency mode. They poll the nearest dc every hour instead of the pdc emulator. This reduces network traffic to the pdc emulator but clients might ha

12. What preforms authentication at a computer level for vpn?
Use the Cipher.exe command line tool.
It is a command-line tool which relies on Windows Remote Management (WinRM) to execute remote commands. The basic syntax for WinRS commands is as follows: winrs -r:target command - where target is the name (NetBIOS or FQDN) of the remote computer tha
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.
L2TP/IPSEC with EAP-TLS.

13. What command is used to view the network monitor via command line?
Prevents the server from performing Internet name resolution.
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
NMCAP. You can initiate a packet capture and make a .cap file to replay later. It allows you to accept a .cap files as input useful in parsing traffic by different ports or ip address. Example: NMCap /inputcapture test.cap /capture IPV4.Address ==10.

14. What is DiskPart?
On a core server
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).
A text-mode command interpreter that enables you to manage objects (disks - partitions - or volumes) by using scripts or direct input at a command prompt.
Does not

15. What sites support Integrated Windows Authentication?
EAP protocol.
Who can shutdown a computer
Only sites added to the local Intranet Zones
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.

16. What does importing and exporting rules affect?
3389
A roecord to indicate the smtp server.
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
Not supported

17. What can you use the User State Migration Tools (USMT) for?
Deploy a secondary zone.
No they are disabled
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
System Restore Points as well as Previous Versions of Files (configured through the System applet).

18. What is DISM.EXE?
A collection of logs created by computers fowarding events. Viewed on the collecting computer.
Pool Active Directory.
Set IE back to its default settings
The Deployment Image Servicing and Management (DISM) tool replaces the pkgmgr - PEImg - and IntlConfg tools that are being retired in Windows 7. DISM provides a single centralized tool for performing all of the functions of these three tools in a mor

19. How do you view failed WSUS updates on the WSUS server?
The Default Programs Control Panel applet
By running the Update Status summary report.
From the Network Policy Access Services role in system manager.
Not supported

20. Windows 9x ___________ an automatic update client.
Does not have
WIndows Update Server
At the volume level - not the drive level.
Use the Advanced Firewall to define Connection Security Rules.

21. What is Oscdimg?
They are designed to provide concise and impartial information about the content in computer and video games so consumers - especially parents - can make an informed purchase decision. ESRB ratings have two equal parts: rating symbols suggest age app
Divide up a large WIM file into multiple smaller .SWM files
Command-line tool for creating an image file (.iso) of a customized 32-bit or 64-bit version of Windows PE. You can then burn that .iso file to a CD-ROM or DVD-ROM. Oscdimg supports ISO 9660 - Joliet - and Universal Disk Format (UDF) file systems.
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.

22. What protocol does NAP enforce when used in 802.1x authentication?
Shaking (quickly dragging back and forth) a window minimizes all other windows. Shaking it again brings them back.
Use IPCONFIG or Status Details for the Network Connection.
Boot the computer with a WINDOWS PE disk that contains a copy of IMAGEX.
EAP protocol.

23. What is terminal server network level authentication?
It will prevent a user from deleting files in a folder. Granting Modify permission to the Creator Owners Group will allow users to delete the files they create but not the files of other users.
Yes
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
If you are logged in as an administrator you can shrink an existing partition or volume to create unallocated disk space - from which you can create a new partition or volume. You can shrink a volume even on a Basic Disk.

24. What does "wbdadmin -startbackup -allcritical" do?
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
Backups of the full system including all critical volumes (volumes that contain operating system state).
Generates a space-estimate file called Usmtsize.txt. This option does not collect the user state. You must also specify /nocompress.
Turn off the Log Spooler event on a print server.

25. What is IPP?
Internet printing protocol. Used for connecting to printers via web browser.
Add an AD integrated zone
They restrict disk space usage for users. If you modify the quota template it applies changes to all folders that the template is assigned.
Duplicate file identification - disk usage patterns - dormant files identification - and audit screening.

26. Where are Applocker policies are configured?
On the zone file of the DNS server in the DNS manager.
It will display driver signing status
Through a GPO under Application Control Policies in the Computer Security Settings Node.
Installing and imaging on hardware agnostic systems as long as the processor architecture is the same (32 or 64 bit)

27. How do you block all traffic for a specific port in windows firewall?
Configure a firewall rule to the specific port and block all connections.
Does not have
WPA2 and 802.1x but require EAP-TLS to be enable.
Windows PE and Windows.old.

28. What can In-Private Browsing not display?
For example - you can create a rule that allows all Windows processes to run except Registry Editor (Regedit.exe).
Yes
Suggested Sites
Promiscuous mode allows you to monitor another machine without installing network monitor on the PC you are trying to monitor.

29. What OSs support SSTP?
Use dnscmd /zonerefresh.
Vista SP1 and Server 2008 and above.
WECUTIL QC
It is a advertisement of a service. The record is configured with the service provided - a port number and weight?

30. You cannot delete an individual restore point - but you can either delete all restore points or all but the most recent restore point. Deleting restore points temporarily frees up disk space. As new restore points are created - disk space will be use
Run Disk Cleanup and click Clean up system files. If you are prompted for an administrator password or confirmation - type the password or provide confirmation. Click the More Options tab - under System Restore and Shadow Copies - click Clean up. In
A CONFIG.XML file
They are designed to provide concise and impartial information about the content in computer and video games so consumers - especially parents - can make an informed purchase decision. ESRB ratings have two equal parts: rating symbols suggest age app
A feature that regularly creates and saves information about your computer's system files and settings. System protection also saves previous versions of files that you've modified. It saves these files in restore points - which are created just befo

31. How do you verify that an Auto Update Client is connecting to its WSUS Server?
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
At the volume level - not the drive level.
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.

32. What does Credential Manager allows you to store?
Configure a firewall rule to the specific port and block all connections.
By coping the application compatibility database to a network location and run a logon script that includes SDBInst on each computer - specifying the UNC path of the file.
EAP protocol.
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol

33. What do you do if a computer is missing the data recovery agent certificate for the EFS recovery agent?
It can enable a windows feature on an offline image with the /Enable-Feature option
Export and import it from another computer.
System Restore Points as well as Previous Versions of Files (configured through the System applet).
Use AD integrated zones so the clients can update to more than one DNS server.

34. How do you calculate the original subnet mask of a network that was divided in to multiple networks?
By using the DISM command with a /Set-Edition option: Example: DISM /IMAGE:C:SAMPLE.WIM /Set-Edition:Ultimate
Take the number of networks and take the square root of it. Subtract that number from the subnet mask. The result is the original mask.
A network location.
Adds a file based zone

35. How do you upgrade windows 7?
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
Through Group Policy at Computer configuration | Administrative Templates | Network | Offline Files | Enable Transparent Caching.
Use IPV6 Unique Local Addresses.
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials

36. What can storage reports be used for?
Duplicate file identification - disk usage patterns - dormant files identification - and audit screening.
Yes - Removable Storage Access policies within a GPO can be used to restrict user's access to devices like USB drives - CDDVD drives - Floppy Disks - Tape Drives - etc.
Schedule reports - monitor attempt to save unauthorized files - and generate reports instantly.
Only a local administrator

37. How do you configure IPSEC between two computers?
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
DNS suffix search lists
Use the Advanced Firewall to define Connection Security Rules.
Use the Cipher.exe command line tool.

38. How do you enable a recovery agent?
Use dnscmd /zonerefresh.
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
Print services for unix can be configured to share out with the LPD (Line Printer Daemon) and clients send print jobs to LPD using LPR (Line printer remote) client software.
Issue a recovery agent certificate to a user and then import that certificate into a GPO that applies to the computer where that user will be allowed to recover any EFS encrypted files. EFS Data recovery agents are optional

39. What is WPA-PSK?
WPA-Personal (uses a preshared key)
No they are disabled
They are in the first 48 bits /48
Internet Protocol security (IPsec) and Internet Protocol version 6 (IPv6).

40. What is BCDEdit?
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
The DHCP server will ping an ip address before assigning it.
You can allow by adding the device vendor's GUID to the allow list in a GPO.
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on

41. How do you change the ReadyBoost configuration of a flash drive?
Plug in the drive and then select properties of the drive. You can make changes through the ReadyBoost tab.
It is a network health policy defines the minumum level of client health required to connect to the network.
1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor - 1 gigabyte (GB) RAM (32-bit) or 2 GB RAM (64-bit) - 16 GB available hard disk space (32-bit) or 20 GB (64-bit) - DirectX 9 graphics device with WDDM 1.0 or higher driver
They are in the first 48 bits /48

42. What service has to be started for Applocker to work?
For example - you can create a rule that allows all Windows processes to run except Registry Editor (Regedit.exe).
Configure a GPO to modify the computers location to look for updates.
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
The Application Identity Service

43. How should EFS files should be recovered?
Use the BCDEDIT.EXE command
They are monitored but not enforced. Users can exced there quota limit.
By an EFS Data Recovery Agent. If the computer is in a workgroup and the user has forgotten their password - the user should recover their own password with a Password Reset Disk in order to retain access to their encrypted files. If the administrato
Enable remote management on a computer and create the proper inbound rules on the advanced firewall.

44. What is SSTP?
Anew vpn protocol that uses SSL (port 443) for encryption.
Disable AutoComplete in Internet Explorer
Netsh add dnsserver. Example netsh interface ipv4 add dnsserver name="Local Area Connection" 192.168.0.1 index=3
Use Safe Mode and then roll back the driver if it was recently updated.

45. How do you configure DHCP to ignore clients on a particular subnet?
By unbinding the DHCP protocol from the nic attached to the subnet.
A file that can be used to perform FQDN name resolution in the absence of a DNS server.
On a core server
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin

46. How do you add the Windows 7 VHD to the boot choices menu?
Only Business Track Windows 7 editions (Professional - Enterprise - Ultimate).
Configure the primary zone to transfer to only DNS servers listed on the names server tab or by ip address.
It will prevent a user from deleting files in a folder. Granting Modify permission to the Creator Owners Group will allow users to delete the files they create but not the files of other users.
Use the BCDEDIT.EXE command

47. How do you statically add a route to a route table?
Drop both inbound and outbound traffic
By the RRAS manager or from the command line. For the subnet you can either use the / command or the octet subnet. Example: Route -p add 192.168.1.0/24 192.168.1.1
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
Problem Steps Recorder in the Windows 7 operating system is a feature that enables users to record their interactions with an application and provide a detailed screen-by-screen view with accompanying information including mouse clicks and keyboard i

48. What are the ESRB Ratings?
Use AD integrated zones so the clients can update to more than one DNS server.
For example - you can create a rule that allows all Windows processes to run except Registry Editor (Regedit.exe).
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
Only a local administrator

49. Direct Access requires...
Restrict when a child can logon to a computer.
Install and run many Windows XP productivity applications directly from your Windows 7-based PC. It utilizes virtualization technology - such as Windows Virtual PC - to provide a virtual Windows XP Professional SP3 environment for Windows 7 so that o
A LAN Router only or a LAN to WAN Router
Computer certificates be installed on client computers

50. What does Scanstate /OfflineWinOld: C:Windows.old do?
Perform an offline migration
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.
Use the Programs and Features Control Panel applet to
They can place quotas on folders/volumes - activity screen files - and generate comprehensive storage reports. This assists in not only monitoring existing resource but helping on future planning.